docs: def manually_disable_aa_profile(self):
          """
          Manually disable an apparmor profile.
  
          If aa-profile-mode is set to disabled (default) this is required as the
          template has been written but apparmor is yet unaware of the profile
          and aa-disable aa-profile fails. Without this the profile would kick
          into enforce mode on the next service restart.
  
          """
          profile_path = '/etc/apparmor.d'
          disable_path = '/etc/apparmor.d/disable'
          if not os.path.lexists(os.path.join(disable_path, self.aa_profile)):
              os.symlink(os.path.join(profile_path, self.aa_profile),
                         os.path.join(disable_path, self.aa_profile))